Analysis

  • max time kernel
    135s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 10:50

General

  • Target

    85a5c13ab6e63d27df6dda8045714974cfe328725741bba7cec6d514d9bce4d7.exe

  • Size

    391KB

  • MD5

    3b9508e658b4052ffeb8ca92a366a8c9

  • SHA1

    d9bf29919b768753ed01a784b7588ee143d9de4c

  • SHA256

    85a5c13ab6e63d27df6dda8045714974cfe328725741bba7cec6d514d9bce4d7

  • SHA512

    6a7181117ce1aeb16674e536eda3c217408e3703b7a4dee7c06447ee63a23742bddaca0d3a83af30984831ec7872119ea03c0c9f96057ec2016aed15360f1e2d

  • SSDEEP

    12288:pRDBpeFtt68N+TthqS47VT2CKroGy0wV:pRVpeFP68UTW155KcLV

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85a5c13ab6e63d27df6dda8045714974cfe328725741bba7cec6d514d9bce4d7.exe
    "C:\Users\Admin\AppData\Local\Temp\85a5c13ab6e63d27df6dda8045714974cfe328725741bba7cec6d514d9bce4d7.exe"
    1⤵
      PID:5036
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5036 -s 1076
        2⤵
        • Program crash
        PID:4124
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 5036 -ip 5036
      1⤵
        PID:4684

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5036-0-0x0000000002150000-0x000000000218B000-memory.dmp

        Filesize

        236KB

      • memory/5036-1-0x0000000002190000-0x00000000021E0000-memory.dmp

        Filesize

        320KB

      • memory/5036-2-0x0000000002150000-0x000000000218B000-memory.dmp

        Filesize

        236KB

      • memory/5036-3-0x0000000000400000-0x0000000000513000-memory.dmp

        Filesize

        1.1MB

      • memory/5036-4-0x0000000074990000-0x0000000075140000-memory.dmp

        Filesize

        7.7MB

      • memory/5036-6-0x00000000027D0000-0x0000000002836000-memory.dmp

        Filesize

        408KB

      • memory/5036-5-0x0000000004E60000-0x0000000004E70000-memory.dmp

        Filesize

        64KB

      • memory/5036-7-0x0000000002190000-0x00000000021E0000-memory.dmp

        Filesize

        320KB

      • memory/5036-8-0x0000000000400000-0x0000000000513000-memory.dmp

        Filesize

        1.1MB

      • memory/5036-9-0x0000000074990000-0x0000000075140000-memory.dmp

        Filesize

        7.7MB

      • memory/5036-10-0x0000000004E60000-0x0000000004E70000-memory.dmp

        Filesize

        64KB

      • memory/5036-11-0x0000000004E70000-0x0000000005414000-memory.dmp

        Filesize

        5.6MB

      • memory/5036-12-0x0000000004CE0000-0x0000000004D42000-memory.dmp

        Filesize

        392KB

      • memory/5036-14-0x0000000004E60000-0x0000000004E70000-memory.dmp

        Filesize

        64KB

      • memory/5036-15-0x0000000004E60000-0x0000000004E70000-memory.dmp

        Filesize

        64KB

      • memory/5036-16-0x0000000004D40000-0x0000000004DD2000-memory.dmp

        Filesize

        584KB

      • memory/5036-19-0x0000000000400000-0x0000000000513000-memory.dmp

        Filesize

        1.1MB

      • memory/5036-20-0x0000000074990000-0x0000000075140000-memory.dmp

        Filesize

        7.7MB